Difference between revisions for Users / Eo Ny
|
← Previous edit |
Next edit → |
Additions:
===TODO Items (From Code Comments)===
- Improves security by not exposing IDs in storage layer
- Would require hashing logic in store_* methods
- Track ##sticky__ip## changes more comprehensively
- Create security audit trail
- Multi-session management (parent/child sessions)
- Useful for complex user flows
- Maintain session history for analysis
- Detect potential session hijacking patterns
- Implement session relationship tracking
- Detect and block delayed session ID usage
- Current implementation allows 5-second window
- Could be more granular
Deletions:
=== TODO Items (From Code Comments) === - Improves security by not exposing IDs in storage layer - Would require hashing logic in store_* methods - Track ##sticky__ip## changes more comprehensively - Create security audit trail - Multi-session management (parent/child sessions) - Useful for complex user flows - Maintain session history for analysis - Detect potential session hijacking patterns - Implement session relationship tracking - Detect and block delayed session ID usage - Current implementation allows 5-second window - Could be more granular